CiscoProfessional level300-420Page 2 of 4

300-420 exam dumps: questions 101 to 200 of 322

Page 2 of the free 300-420 question bank for the Designing Cisco Enterprise Networks exam. Questions 101 to 200 are listed below, the first 5 in full with answers and explanations. Back to page 1 for the exam overview and FAQ.

Question bank last updated February 2025

Start timed practice exam Questions 101 to 200

Free 300-420 practice questions

Questions 101 to 105 of 322

Pick an answer before you open the explanation. Each question also has its own page with a permalink.

300-420 Question 101

Select 4

A network engineer is designing a new enterprise LAN that will support Wake-on-LAN (WoL) functionality for desktop computers across multiple floors. The network switches will also provide Power over Ethernet (PoE) to various devices such as IP phones and wireless access points. What design considerations must the engineer account for to ensure both WoL and PoE function correctly?

A
Ensure that the switches support sufficient PoE power budgets to handle all connected devices.
B
Enable WoL-specific packet forwarding on switches to ensure Magic Packets can traverse the network.
C
Deploy switches that support IEEE 802.3af for PoE and WoL functionality.
D
Ensure that broadcast traffic, including Magic Packets, is allowed across VLANs if WoL is required between different subnets.
E
Configure PoE to prioritize power delivery to devices with critical functions, such as IP phones, during power budget constraints.

Show answer and explanation

Correct answers: A, B, D, E

Explanation

To successfully implement both PoE and WoL in an enterprise network, the engineer must ensure switches have adequate PoE power budgets, properly configure the network to forward WoL Magic Packets, and account for VLAN or subnet boundaries for WoL. Additionally, PoE prioritization ensures critical devices receive power during constraints. IEEE 802.3af defines PoE standards but does not address WoL functionality, so additional configurations are necessary for Wake-on-LAN support.

A. Correct.
Correct. Switches must have adequate PoE power budgets to meet the power requirements of connected devices, ensuring uninterrupted operation of devices such as IP phones and access points.
B. Correct.
Correct. WoL functionality depends on Magic Packets reaching the intended device, so switches must support WoL-specific packet forwarding or ensure multicast/broadcast traffic is handled appropriately.
C. Incorrect.
Incorrect. While IEEE 802.3af defines PoE standards, it does not inherently support WoL functionality. WoL requires additional considerations, such as Magic Packet forwarding.
D. Correct.
Correct. If WoL is required across VLANs, the network must allow broadcast or directed broadcast traffic for Magic Packets to reach the destination. This requires proper VLAN and routing configurations.
E. Correct.
Correct. Configuring PoE prioritization ensures that critical devices, such as IP phones, receive power during power budget constraints, which is important in a well-designed enterprise network.

300-420 Question 102

Single answer

An enterprise network is being designed to support both Power over Ethernet (PoE) and Wake-on-LAN (WoL) functionalities for IP phones and desktop computers. The network engineer needs to ensure that devices can be powered on remotely while meeting the power requirements efficiently. Which design consideration is MOST critical for ensuring both functionalities work seamlessly?

A
Ensure the switches support both IEEE 802.3af/at standards and have sufficient power budget.
B
Enable Energy Efficient Ethernet (EEE) to minimize power usage during WoL operations.
C
Configure VLANs to prioritize WoL traffic over PoE to prevent conflicts.
D
Ensure that the end devices support WoL magic packets and are connected to PoE-enabled switch ports.

Show answer and explanation

Correct answer: D

Explanation

For PoE and WoL to work together seamlessly, the network must provide power to the devices via PoE while also supporting the transmission of WoL magic packets. This requires that end devices are compatible with WoL and are connected to PoE-enabled switch ports to ensure both power delivery and wake-up signal functionality. Other options, while related to power efficiency or network configuration, do not address the core requirements for enabling PoE and WoL together.

A. Incorrect.
While supporting IEEE 802.3af/at standards and sufficient power budget is important, it does not directly ensure the functionality of WoL, which relies on network configuration and end-device capabilities.
B. Incorrect.
Energy Efficient Ethernet (EEE) reduces power consumption but is not directly relevant to enabling Wake-on-LAN or ensuring compatibility with PoE.
C. Incorrect.
Configuring VLANs to prioritize WoL traffic over PoE is not a standard or necessary step for these functionalities to work together. PoE and WoL operate independently on different layers of the network.
D. Correct.
Ensuring that the end devices support WoL magic packets and are connected to PoE-enabled switch ports is critical for enabling both functionalities. PoE provides power while WoL requires proper device and network configuration to process the wake-up signal.

300-420 Question 103

Select 3

A network engineer is designing a campus network that supports Wake-on-LAN (WoL) functionality for remotely powering on devices, as well as Power over Ethernet (PoE) to power IP phones and access points. Which considerations must the engineer prioritize to ensure both WoL and PoE operate effectively in the design?

A
Ensure switches support IEEE 802.3af or IEEE 802.3at standards for PoE.
B
Enable Unicast Routing on all network interfaces to support WoL packets.
C
Allow the forwarding of broadcast traffic required for Magic Packet delivery across VLANs.
D
Configure Static ARP entries for devices intended to be powered on using WoL.
E
Ensure switches support sufficient power budgeting to handle all connected PoE devices.

Show answer and explanation

Correct answers: A, C, E

Explanation

To ensure PoE and WoL work effectively in a network design, the engineer must verify that switches adhere to the relevant PoE standards (IEEE 802.3af/at) and have sufficient power capacity for all devices. Additionally, because WoL relies on broadcast Magic Packets, the network must support the forwarding of such packets across VLANs. While features like Static ARP and Unicast Routing are useful in some scenarios, they are not essential for the operation of WoL and PoE.

A. Correct.
Correct: PoE requires switches to comply with IEEE 802.3af or IEEE 802.3at standards to ensure proper power delivery to devices like IP phones and access points.
B. Incorrect.
Incorrect: WoL does not depend on Unicast Routing; it relies on broadcast or directed broadcast packets (Magic Packets) to wake devices.
C. Correct.
Correct: WoL Magic Packets are typically broadcast packets, and network devices must allow the forwarding of these packets across VLANs for WoL to function correctly.
D. Incorrect.
Incorrect: While Static ARP entries can help in specific cases, they are not a core requirement for WoL. Devices can often be reached without them.
E. Correct.
Correct: Switches must have enough power budget to supply all PoE devices. Insufficient power provisioning can lead to device outages or functionality issues.

300-420 Question 104

Select 4

You are designing a Layer 2 network for a large enterprise. To enhance the security posture of the network, you must prevent unauthorized devices from connecting, mitigate potential issues from malicious STP manipulation, and ensure ACLs are enforced at the VLAN level. Which of the following techniques should you implement to address these requirements?

A
Port security to restrict access to specific MAC addresses
B
BPDU Guard to disable ports with unauthorized STP activity
C
VACLs to enforce ACLs at the VLAN level
D
Root Guard to prevent unauthorized devices from becoming the STP root
E
DHCP snooping to prevent rogue DHCP servers

Show answer and explanation

Correct answers: A, B, C, D

Explanation

To enhance Layer 2 security, a combination of techniques such as port security, BPDU Guard, and Root Guard can mitigate unauthorized device connections and malicious STP manipulation. VACLs further enhance security by applying traffic filtering at the VLAN level. While DHCP snooping is a valuable security feature, it is not directly relevant to the requirements in this scenario.

A. Correct.
Port security restricts access to a port by allowing only specific MAC addresses. This prevents unauthorized devices from connecting and is a critical Layer 2 security technique.
B. Correct.
BPDU Guard disables a port if it receives a BPDU on a port where STP participation is not expected. This mitigates risks from malicious STP manipulation.
C. Correct.
VACLs (VLAN Access Control Lists) enforce access control at the VLAN level, ensuring that only authorized traffic is permitted within or between VLANs.
D. Correct.
Root Guard prevents unauthorized devices from becoming the STP root, which helps maintain the intended STP topology and prevents potential network disruptions.
E. Incorrect.
DHCP snooping is not directly relevant to this scenario as it focuses on preventing rogue DHCP servers rather than Layer 2 security techniques related to STP or VLANs.

300-420 Question 105

Select 3

A network engineer is tasked with securing a Layer 2 network in a campus environment. The engineer notices that unauthorized devices are connecting to access layer switches, and there have been instances of broadcast storms caused by Layer 2 loops. Which combination of Layer 2 security techniques should the engineer implement to mitigate these issues?

A
Enable BPDU Guard on all access ports to protect against misconfigured switches or rogue devices.
B
Configure Port Security to limit the number of MAC addresses allowed on each access port.
C
Implement VLAN Access Control Lists (VACLs) to restrict traffic between VLANs at Layer 2.
D
Activate Root Guard on all ports to ensure the current root bridge remains unchanged.
E
Disable Spanning Tree Protocol (STP) on all access layer switches to prevent loops.

Show answer and explanation

Correct answers: A, B, D

Explanation

To secure a Layer 2 network and address the identified issues, the engineer should implement BPDU Guard to protect against rogue devices sending BPDUs, Port Security to limit unauthorized device connections, and Root Guard to maintain the integrity of the STP topology. Disabling STP is not a valid solution, and VACLs are not directly related to resolving the specific problems described in the scenario.

A. Correct.
Enabling BPDU Guard on access ports ensures that if any unauthorized device sends Bridge Protocol Data Units (BPDUs), the port will be placed into an error-disabled state, preventing potential topology changes or loops.
B. Correct.
Port Security can restrict the number of MAC addresses allowed on a port, which helps prevent unauthorized devices from connecting to the network.
C. Incorrect.
VLAN Access Control Lists (VACLs) are used to filter traffic at the VLAN level but are not relevant to mitigating the specific issues of unauthorized device connections or broadcast storms.
D. Correct.
Root Guard prevents unauthorized devices from becoming the root bridge by blocking superior BPDUs received on specific ports. This helps protect the stability of the STP topology.
E. Incorrect.
Disabling STP is not recommended, as it would remove the loop prevention mechanisms entirely, potentially leading to broadcast storms.

Timed practice exam

Take a 300-420 practice test under exam conditions

75 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

300-420 practice questions 101 to 200 of 322

Every question has a page with the answer and explanation. Numbers are stable, so you can bookmark or share them. The bank is split into 4 pages of up to 100 questions.